Interface DelegationToken
-
- All Superinterfaces:
AuthenticationToken
,Cloneable
,Destroyable
,org.apache.hadoop.io.Writable
- All Known Implementing Classes:
DelegationTokenImpl
public interface DelegationToken extends AuthenticationToken
AnAuthenticationToken
that wraps a "Hadoop style" delegation token created by Accumulo. The intended scope of this token is when a KerberosToken cannot be used instead. The most common reason for this is within YARN jobs. The Kerberos credentials of the user are not passed over the wire to the job itself. The delegation token serves as a mechanism to obtain a transient shared secret with Accumulo using aKerberosToken
and then run some task authenticating with that shared secret.Obtain a delegation token by calling
SecurityOperations.getDelegationToken(org.apache.accumulo.core.client.admin.DelegationTokenConfig)
- Since:
- 1.7.0
-
-
Nested Class Summary
-
Nested classes/interfaces inherited from interface org.apache.accumulo.core.client.security.tokens.AuthenticationToken
AuthenticationToken.AuthenticationTokenSerializer, AuthenticationToken.Properties, AuthenticationToken.TokenProperty
-
-
Method Summary
-
Methods inherited from interface org.apache.accumulo.core.client.security.tokens.AuthenticationToken
clone, getProperties, init
-
Methods inherited from interface javax.security.auth.Destroyable
destroy, isDestroyed
-
-